Description:
A system role is copied from the System Support role and the privileges "Administrator Panel (Courses) > Courses > Modify Data Source" and "Administrator Panel (Organizations) > Organizations > Modify Data Source" are restricted.
When a user with this role goes to the System Admin Panel, searches for a course and accesses the Integration dropdown menu or the dropdown menu for a course itself, the user does not see the 'Modify Data Source' option in either menu.
But, when a user accesses Organizations, the dropdown menus have the option 'Modify Data Source' when it should not be shown. However, the option does not work and throws an 'Access Denied Error'.
Steps to Repeat:
- Log into Blackboard Learn Ultra Experience as an administrator
- Navigate to System Roles from the Administrator Panel and copy the system role POC (this is a copy of the system support role) as test_poc and ensure that the 'Modify Data Source' for Courses and Organizations is permitted
- Create a user and give this user the primary system role of test_poc
- Log in as this user and navigate to the System Admin panel > Courses > Search for a course >Access the drop down menu for that course and select 'Modify Data Source'
- Change the Data Source Key (DSK) of this course submitting all OKs in pop- up windows.
Observed Behavior: The DSK changes without error.
Expected Behavior: The DSK changes without error.
- Repeat steps 3 to 5 for Organizations
Observed Behavior: The DSK changes without error.
Expected Behavior: The DSK changes without error.
- Go to the POC role and restrict both privileges: "Administrator Panel (Courses) > Courses > Modify Data Source" and "Administrator Panel (Organizations) > Organizations > Modify Data Source".
- As the test user log out and back in then go to course search page and access the dropdown menu for the modified course and attempt to see if you can change the DSK with the Modify Data Source function
Observed Behavior: The option is missing as the privilege is restricted.
Expected Behavior: The option should be missing as the privilege is restricted
- Navigate to the Organization Search page and access the dropdown menu for the changed organization
Observed Behavior: Even though the privilege is restricted the option does show to the user when it should not and should behave the same in Organizations as it does it courses.
Note: If the user attempts to change the DSK the following error is displayed:
Access Denied
Either you are not logged in or you do not have the appropriate privileges to perform this action.Expected Behavior: Since the privilege is restricted the option should be missing.
